High
CVE-2025-5391
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-8568
GMap - Venturit <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'h' Parameter
Medium
CVE-2025-8462
RT Easy Builder <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-8418
B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation
Medium
CVE-2025-52730
WordPress Event Manager, Event Calendar and Booking Plugin <= 4.0.24 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2025-49036
Premium Addons for KingComposer <= 1.1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-50040
CF7 Spreadsheets <= 2.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-64383
Qi Blocks <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30993
Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.1.7 - Missing Authorization
Medium
CVE-2025-52775
Project Cost Calculator <= 1.0.0 - Missing Authorization
Medium
CVE-2025-8767
AnWP Football Leagues <= 0.16.17 - Authenticated (Administrator+) CSV Injection
Medium
CVE-2025-52746
Restaurante <= 3.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-52747
Themebox - Digital Products Ecommerce <= 1.4.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-60088
WebinarIgnition <= 4.06.04 - Missing Authorization
Medium
CVE-2025-7726
The7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes
High
CVE-2025-60090
Gravity Forms Insightly <= 1.1.6 - Unauthenticated PHP Object Injection
High
CVE-2025-60089
Gravity Forms FreshDesk <= 1.3.5 - Unauthenticated PHP Object Injection
High
CVE-2025-60174
Gravity Forms Constant Contact <= 1.1.2 - Unauthenticated PHP Object Injection
High
CVE-2025-58636
Gravity Forms Keap/Infusionsoft <= 1.2.3 - Unauthenticated PHP Object Injection
High
CVE-2025-60091
Gravity Forms Zoho CRM and Bigin <= 1.2.9 - Unauthenticated PHP Object Injection
High
CVE-2025-60178
Gravity Forms HubSpot <= 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2025-4796
Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
Critical
CVE-2025-49271
GravityWP - Merge Tags <= 1.4.4 - Unauthenticated Local File Inclusion
High
CVE-2025-60209
Connector for Gravity Forms and Google Sheets <= 1.2.6 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.